policies: update: `roles` set to `[]` doesn't default to `public`

[soedirgo]

Context: supabase/supabase#7740